On Fri, Sep 26, 2003 at 11:38:15PM -0400, Matt Kettler wrote:
> >Many spammers are using paypal.com to get their emails "whitelisted". Also
I noted this too.
It doesn't seem like a good idea therefore that spamassassin comes
with a pre-built whitelist; it makes it too easy for abusers to
know whi
That filters a lot more than just the worm.
The MDS_Swen_A will be true with only one of MDS_Swen_A_3,
MDS_Swen_A_6 or MDS_Swen_A_7 is true.
Now each of those ALONE already filter millions of legal mail
away that you might want to receive.
--
Carlo Wood <[EMAIL PROTEC
ary distribution. If they don't, we should
tell the FSF about it.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
rt to make a backup
copy inside the cron job, prior to executing the
sa-learn command.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek h
-Qmail-Scanner-1.16:" etc is spammy, but it is not!
It is a header that qmail adds to ALL my mail?!
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/
On Wed, Sep 10, 2003 at 10:36:33AM -0400, Matt Kettler wrote:
> At 03:55 PM 9/10/03 +0200, Carlo Wood wrote:
> >The attached mail got through spam-assassin without a problem...
> >Why? Where is the BAYES_* test?
> >Does this mean that the bayes engine thinks this is less tha
On Wed, Sep 10, 2003 at 03:55:41PM +0200, Carlo Wood wrote:
> The attached mail got through spam-assassin without a problem...
> Why? Where is the BAYES_* test?
It turns out that NO mail is having the BAYES_* test anymore
all of a sudden...
Why?
How can I debug what is going on
The attached mail got through spam-assassin without a problem...
Why? Where is the BAYES_* test?
Does this mean that the bayes engine thinks this is less than 10%
chance to be spam? That would be ridiculous!
How can I test on which keywords it is basing that this ham?
--
Carlo Wood <[EM
lter your mail anyway,
this is not an SA problem: SA just marks whether or
not a mail is spam.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to
/usr/bin/spamd --debug -x -L -u spamc
>
> The spamc user does exist and its home directory is /opt/spamassassin. When
> I issue the spamc command manually, it does not user pyzor or dcc. Any
> thoughts?
Remove the -L, that makes spamd skip any network tests,
including the pyzor/dcc one
e i is written as í), which also wasn't detected.
>
> Markus
Moreover, spamassassin should imho treat the characters Ee3 as the same,
likewise Ss5$, Ii1|!, Oo0 Aa@ etc etc, when looking for really
spammy keywords. It starts to be common practise that spammers
try to avoid automatic rec
sage once and only forgets it when it already knew it.
If it learned it as spam and you learn it again as ham
or visa versa then it also works.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to g
U_DUL 0
score X_OSIRU_DUL_FH0
score X_OSIRU_OPEN_RELAY0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_SPAM_SRC 0
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is spo
y waiting for some network query.
Try adding this to /etc/mail/spamassassin/local.cf :
skip_rbl_checks 1
use_razor2 0
use_dcc 0
use_pyzor 0
Or run spamd or spamassassin (which ever you use) with the -L flag.
And see if that helps.
--
Carlo Woo
ng connections (8) (a command
line parameter of tcpserver) as well as the maximum number of
remote deliveries (5) and -why not- the local deliveries (5).
Those where respectively 20, 20 and 10.
--
Carlo Wood <[EMAIL PROTECTED]>
---
Thi
issue.
> Try the -m switch.
Also thanks! Another very valuable hint.
Damn, and I really have read the man page of spamd in the
past but had forgotten about this possibility completely.
--
Carlo Wood <[EMAIL PROTECTED]>
---
Th
ct spam?
?
I mean: I started to use SA and run that on
the machine that is also running the firewall.
That way my working machine is not loaded anymore.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
sh -c /usr/bin/spamc
-f < /var/spool/qmailscan/working/new/alinoe.co
qmailq4541 0.0 0.8 2216 1028 ?D16:52 0:00 sh -c /usr/bin/spamc
-f < /var/spool/qmailscan/working/new/alinoe.co
--
Carlo Wood <[EMAIL PROTECTED]>
-
On Tue, Sep 02, 2003 at 04:04:45PM +0200, Kandji Développeur wrote:
> Hello,
>
> I've been using spamassassin for 2 weeks and it (*seems*) that it caused my system
> to go down...
>
> The story :
> linux RedHat 7.3 - kernel 2.4.18#3 on smp system (2xPII)
> perl 5.6.1
> spamassassin version 2.
I read here that bayes is only turned on after
it learned from at least 200 spams AND 200 hams.
That number could be more. It only starts to be
efficient after you got say 1000 of both.
Once it kicks in, you should see tests with
names like BAYES_*.
--
Carlo Wood <[EMAIL PROTEC
olearned by the Bayesian
engine, and there is no support for that.
I think I can work around this by abusing the existing tflags, but
it would be better if a new flag was added for this particular purpose.
--
Carlo Wood <[EMAIL PROTECTED]>
s/tokens and that does
screw up the Bayesian database when learning it as spam.
Perhaps a 'never_autolearn_whitelist_to' should be added?
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGe
1323008 Sep 2 01:38 /usr/spamassassin/bayes_seen
-rw-rw-rw-1 nobody nobody2666496 Sep 2 01:38 /usr/spamassassin/bayes_toks
The 'nobody' owned files were changed by cron.
It works just fine thus.
--
Carlo Wood <[EMAIL PROTECTED]>
---
o assume that white listed mail is still
classified / auto-learned. I'd suggest an explicit mention under
'whitelist_from' et al that matched mails will not be auto-learned.
--
Carlo Wood <[EMAIL PROTECTED]>
---
: What happens when you use a REAL mail,
not just plain text thus.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
tion option that will
cause SA to NOT auto-learn anything that is whitelisted.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http:/
, resulting
in it automatically being added as 'ham'.
What is it that SA (2.55) does? I've white listed
*this* mailinglist for example, but I really don't want
it to be classified as ham!
Regards,
--
Carlo Wood <[EMAIL PROTECTED]>
-
On Sun, Aug 31, 2003 at 12:35:23PM -0400, Matt Kettler wrote:
> At 01:50 PM 8/31/2003 +0200, Carlo Wood wrote:
> >What does it use to determine the users home directory?
>
> SpamAssassin uses ~/ to determine the home directory of the current user.
> And yes, that is standard
home directory?
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL PROTE
On Sun, Aug 31, 2003 at 12:52:14AM +0200, Alexander Newald wrote:
> /home/vhost/.spamassassin/bayes_toks) I also didn't manage to get userprefs
> from db.
What about the -u option of spamc?
--
Carlo Wood <[EMAIL PROTECTED]>
--
On Sat, Aug 30, 2003 at 01:45:05PM +0200, Carlo Wood wrote:
> > Question: Will the Basesian filters be correctly
> > adjusted, despite the change of headers?
I figured it out. The answer is yes.
It only looks at the Message-Id.
--
Carlo Wood <[
A spam sneeked through.
It contained this in the header:
Date: Sat, 30 Aug 2003 04:20:56 +0300 (IDT)
Date-warning: Date header was inserted by mxout2.netvision.net.il
I think there should be a test on the latter header entry
that adds extra points.
--
Carlo Wood <[EMAIL PROTEC
Can someone please answer this mail that I posted a few days ago?
On Fri, Aug 29, 2003 at 01:00:45AM +0200, Carlo Wood wrote:
> I have the following setup:
>
> 1) Firewall receives mail, pipes it through
>spamd and adds a header marking it as
>spam.
> 2) Firewall send
K_TIME (4.4 points) Message-Id is fake (in Outlook Express format)
Isn't 13 points for *just* the message ID not a bit much?
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
htt
ter (except for the message-ID)
and the (mime) encapsulation and extra new-lines etc
won't matter either. But does it work like that?
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:T
nything that looks like a RBL test.
Still uncertain about whether it works,
--
Carlo Wood <[EMAIL PROTECTED]>
PS I removed [EMAIL PROTECTED] from the CC because
his mail server says that that user doesn't exist.
---
This sf.net e
t installed that perl stuff, will it just
work now? (After restarting spamd).
There clearly is no way to verify it :/
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http:/
of
osirius at all anymore.
Thanks
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk maili
ing the -L commandline parameter on either spamassassin
or spamd.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Sp
out of
the screen, or use an extremely small font. Or the
words could be part of a construct that is never
displayed at all, not limited to HTML comments.
In order to detect that you'd need a fullfledged
HTML decoder... this is going to eat a lot of cpu :(
--
Carlo Wood <[EMAI
ffend.
A mail containing the literal phrase "child pornography"
is more probably a serious mail about the topic than that
will be any kind of advertisement.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email i
On Tue, Aug 26, 2003 at 02:03:59PM +0200, 'Carlo Wood' wrote:
> I'll carefully make a new list that I will post later.
Ok, I now did it correctly - using an awk program.
Number of hams: 4548
Number of hams without '^(X-[Mm]ailer|User-Agent):': 1833
Number of Mess
to find 10 people
with large collections of the past 5 years.
Getting large collections of spam shouldn't be too hard,
you probably have them already - don't you?
Typical mailinglist mails are not hard to get either, if
you are only concerned with the body content.
--
Carlo Wood <[EMA
entry.
I am sorry! That makes the whole list void because then
message-ids and X-mailer lines were mixed from different
messages.
I'll carefully make a new list that I will post later.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This SF.net
On Tue, Aug 26, 2003 at 10:32:51AM -0400, Matt Kettler wrote:
> What are you doing to call spamc?
Ah, thanks. I found it - was calling "spamc -c -f".
After removing the "-c", it worked.
--
Carlo Wood <[EMAIL PROTECTED]>
--
D]>
Where, I think, the part after the '@' is the hostname without domain.
After all...
>hostname
ansset
--
Carlo Wood <[EMAIL PROTECTED]>
---
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple op
us: Yes, hits=5.8 required=5.0
for the rest the mail is unaltered.
I really need the X-Spam-Report: lines!
Please help.
--
Carlo Wood <[EMAIL PROTECTED]>
---
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple o
will CORRUPT EVERY SINGLE
MESSAGE."
Therefore I'd like to be sure that whatever "-F 0"
did is still done. But how?
--
Carlo Wood <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Wel
48 matches
Mail list logo
